SUSE-SU-2024:4095-1
- Source
- https://www.suse.com/support/update/announcement/2024/suse-su-20244095-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4095-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2024:4095-1
- Related
- Published
- 2024-11-28T12:23:58Z
- Modified
- 2024-11-28T12:23:58Z
- Summary
- Security update for postgresql15
- Details
-
This update for postgresql15 fixes the following issues:
- CVE-2024-10976: Ensure cached plans are marked as dependent on the calling role when RLS applies to a non-top-level table reference (bsc#1233323).
- CVE-2024-10977: Make libpq discard error messages received during SSL or GSS protocol negotiation (bsc#1233325).
- CVE-2024-10978: Fix unintended interactions between SET SESSION AUTHORIZATION and SET ROLE (bsc#1233326).
- CVE-2024-10979: Prevent trusted PL/Perl code from changing environment variables (bsc#1233327).
- References
-
- https://www.suse.com/support/update/announcement/2024/suse-su-20244095-1/
- https://bugzilla.suse.com/1233323
- https://bugzilla.suse.com/1233325
- https://bugzilla.suse.com/1233326
- https://bugzilla.suse.com/1233327
- https://www.suse.com/security/cve/CVE-2024-10976
- https://www.suse.com/security/cve/CVE-2024-10977
- https://www.suse.com/security/cve/CVE-2024-10978
- https://www.suse.com/security/cve/CVE-2024-10979
Affected packages
SUSE:Linux Enterprise Server 12 SP5-LTSS / postgresql15
Package
- Name
- postgresql15
- Purl
- pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed15.10-3.33.1
Ecosystem specific
{
"binaries": [
{
"postgresql15-docs": "15.10-3.33.1",
"postgresql15": "15.10-3.33.1",
"postgresql15-plpython": "15.10-3.33.1",
"postgresql15-server": "15.10-3.33.1",
"postgresql15-plperl": "15.10-3.33.1",
"postgresql15-pltcl": "15.10-3.33.1",
"postgresql15-contrib": "15.10-3.33.1"
}
]
}
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 / postgresql15
Package
- Name
- postgresql15
- Purl
- pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed15.10-3.33.1
Ecosystem specific
{
"binaries": [
{
"postgresql15-docs": "15.10-3.33.1",
"postgresql15": "15.10-3.33.1",
"postgresql15-plpython": "15.10-3.33.1",
"postgresql15-server": "15.10-3.33.1",
"postgresql15-plperl": "15.10-3.33.1",
"postgresql15-pltcl": "15.10-3.33.1",
"postgresql15-contrib": "15.10-3.33.1"
}
]
}